CVE-2022-28192
Medium
Description
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (nvidia.ko), where it may lead to a use-after-free, which in turn may cause denial of service. This attack is complex to carry out because the attacker needs to have control over freeing some host side resources out of sequence, which requires elevated privileges.
SeverityMedium
CVSS4.1
Exploit probability—
ProductNvidia Virtual Gpu
PublishedMay 17, 2022
First seenMay 17, 2022
Weakness typeCWE-416Use after free
How to fix
Update
- nvidia virtual_gpu11.8, 13.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nvidia virtual_gpu | 11.0 ≤ v < 11.8, 13.0 ≤ v < 13.3, 14.0 | 11.8, 13.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.